US9537860B2 - Display control apparatus, display control method and server system - Google Patents

Abstract

A display control apparatus performs download processing and streaming processing. In the download processing, after first mutual authentication between removable media and a license server, the removable media receive and store a first title key from a license server and first encrypted content from a content server. In the streaming processing, the removable media and the license server perform second mutual authentication, the removable media receive and store a second title key and a content address from the license server, the removable media and the display control apparatus perform third mutual authentication, the display control apparatus acquires the second title key and the content address recorded on the removable media, the display control apparatus streams and receives second encrypted content from the content server, and the display control apparatus decodes the streamed-and-received second encrypted content using the second title key, and streams and reproduces the decoded second encrypted content.

Description

FIELD

An embodiment of this invention relates to a display control apparatus, a display control method and a server system for controlling display of a graphical user interface about content receiving.

BACKGROUND

There is an art in which a right server for delivering right information about content and removable media having a copyright protection function to the recorded content directly perform mutual authentication through a reproducing device capable of record and reproduction on the removable media. In this art system, the encrypted content and the right information had by the server are directly downloaded and saved to the removable media and then, the reproducing device and the removable media perform mutual authentication and while reading the encrypted content from the removable media, the cipher is decoded to thereby reproduce the content.

BRIEF DESCRIPTION OF THE DRAWINGS

FIG. 1 is a block configuration diagram showing one example of a content reproducing system as an embodiment.

FIG. 2 is a block configuration diagram showing one example of a signal processing system in the case where a reproducing apparatus constructing the content reproducing system in the embodiment is a digital television broadcast receiver.

FIG. 3 is a block configuration diagram showing one example of a functional block of the reproducing apparatus constructing the content reproducing system in the embodiment.

FIG. 4 is a block configuration diagram showing a configuration example of a content server in the embodiment.

FIG. 5 is a diagram showing one example of a streaming reproduction sequence performed by the content reproducing system in the embodiment.

FIG. 6 is a diagram showing another example of the streaming reproduction sequence performed by the content reproducing system in the embodiment.

FIG. 7 is a diagram showing a further example of the streaming reproduction sequence performed by the content reproducing system in the embodiment.

FIG. 8 is a diagram showing one example of reproduction processing and download processing performed by the content reproducing system in the embodiment.

FIGS. 9A, 9B, 9C and 9D are diagrams showing examples of a screen configuration of a web page provided by the content reproducing system in the embodiment.

DETAILED DESCRIPTION

According to one embodiment, a display control apparatus which outputs video to a display screen includes a processor, a communication module, a connecting module, a receiver, a generator, a display controller and an accepting module. The communication module communicates with a network. The connecting module makes a connection to removable media having a content protection function. The receiver receives data of a web page from a web page delivery server using the communication module. The web page includes a first object for accepting instructions to start download processing based on a first agreement and a second object for accepting instructions to start streaming processing based on a second agreement. The generator generates an image of the web page including an image of the first object and an image of the second object based on the received data of the web page using the processor. The display controller displays the image of the web page on a display device. The accepting module accepts a manipulation with respect to the image of the first object or the image of the second object. The download processing includes first, third and fourth processing. The removable media and a license server connected to the network perform first mutual authentication through the communication module in the first processing. When the first mutual authentication succeeds, the removable media receive a first title key sent from a license server through the communication module and write said first title key in its own recording area in the third processing. The removable media receive first encrypted content sent from a content server connected to the network through the communication module and write said first encrypted content in its own recording area in the fourth processing. The streaming processing includes fifth, sixth, seventh, eighth, ninth and tenth processing. The removable media and the license server perform second mutual authentication through the communication module in the fifth processing. When the second mutual authentication succeeds, the removable media receive a second title key and a content address sent from the license server through the communication module and write said second title key and said content address in the recording area in the sixth processing. The removable media and the display control apparatus perform third mutual authentication in the seventh processing. When the third mutual authentication succeeds, the display control apparatus acquires the second title key and the content address recorded on the removable media in the eighth processing. The display control apparatus streams and receives second encrypted content from the content server using the content address in the ninth processing. The display control apparatus decodes the streamed-and-received second encrypted content using the second title key, and streams and reproduces the decoded second encrypted content in the tenth processing.

Various embodiments will be described hereinafter with respect to the accompanying drawings.

An embodiment will hereinafter be described with reference to the drawings.FIG. 1 shows an outline diagram of one example of acontent reproducing system11 described in this embodiment. Thiscontent reproducing system11 is constructed by connecting a reproducingapparatus12, alicense server13, acontent server14, anaccounting server15, etc. to anetwork16 such as the Internet.

It is assumed that the reproducingapparatus12 among them is, for example, a digital television broadcast receiver incorporating a video output screen, a speaker, etc. or an STB (set top box) capable of making connection to an external video display, a speaker, etc. And, this reproducingapparatus12 can communicate with thelicense server13, thecontent server14 and theaccounting server15 through thenetwork16. Also,removable media17 such as an SD (Secure Digital) memory card can be connected to this reproducingapparatus12. A connection form includes various forms, for example, a slot type, a tray type, a wired type or a wireless type. In addition, the present embodiment describes the case of connecting theremovable media17 to the reproducingapparatus12, but non-removable recording media may be connected to the reproducingapparatus12 and the recording media may execute processing similar to that of theremovable media17 described below.

Thelicense server13 provides the reproducingapparatus12 with, for example, right information including a usage rule in which license conditions of content are described, or a cipher key for decoding encrypted content. Also, thecontent server14 stores encrypted content or a web page indicating a content list capable of streaming or download, and provides the reproducingapparatus12 with these content or the web page. Further, theaccounting server15 performs accounting processing on a user, for example, in the case of requesting viewing of pay content. In addition, thelicense server13, thecontent server14 and theaccounting server15 are separately formed, but may be formed as the same server. Also, a certain server may combine a function of another server and by way of example, theaccounting server15 may have a function of storing and delivering a web page. In this case, theaccounting server15 may receive notification (step S12) of content decision from the reproducingapparatus12 as described below inFIGS. 5 to 7. Also, each of thelicense server13, thecontent server14 and theaccounting server15 may be one device in which a configuration is housed in one cabinet, or may be a server group in which plural devices are connected by an intranet etc.

FIG. 2 shows one example of a signal processing system of the reproducingapparatus12.FIG. 2 assumes the case where the reproducingapparatus12 is the digital television broadcast receiver. That is, a digital television broadcast signal received by anantenna18 is supplied to atuner part20 through aninput terminal19 to thereby select a broadcast signal of a desired channel.

The broadcast signal in which the channel is selected by thistuner part20 is supplied to ademodulation decoding part21 and is restored to a digital video signal, a digital sound signal, etc. and then is outputted to asignal processing part22. Thissignal processing part22 performs predetermined digital signal processing with respect to each of the digital video signal and the digital sound signal supplied from thedemodulation decoding part21.

Then, thissignal processing part22 outputs the digital video signal to asynthesis processing part23, and outputs the digital sound signal to asound processing part24. Thesynthesis processing part23 of these parts superimposes an OSD (on screen display) signal on the digital video signal supplied from thesignal processing part22, and outputs the signal.

The digital video signal outputted from thissynthesis processing part23 is supplied to avideo processing part25, and is converted into an analog video signal of a format capable of display by avideo display part26 of a subsequent stage. Then, the analog video signal outputted from thisvideo processing part25 is supplied to thevideo display part26 to perform video display.

Also, thesound processing part24 converts the inputted digital sound signal into an analog sound signal of a format capable of reproduction by aspeaker27 of a subsequent stage. Then, the analog sound signal outputted from thissound processing part24 is supplied to thespeaker27 to thereby perform sound reproduction.

Here, in this reproducingapparatus12, acontroller28 performs centralized control of various operations including various receiving operations described above. A CPU (central processing unit)28ais built into thiscontroller28, and thecontroller28 respectively controls each of the parts so as to reflect the manipulation content by receiving manipulation information from a manipulatingpart29 formed in a body of the reproducingapparatus12 or manipulation information sent from aremote controller30 and received by a receivingpart31. In addition, thecontroller28 may operate by various processors (microcomputers) operating by, for example, dedicated firmware as well as a general-purpose CPU.

In this case, thecontroller28 uses amemory28b. Thismemory28bmainly has ROM (read only memory) for storing a control program executed by theCPU28a, RAM (random access memory) for providing theCPU28awith a work area, and nonvolatile memory for storing various pieces of setting information, control information, etc.

Also, an HDD (hard disk drive)32 is connected to thiscontroller28. Thiscontroller28 can perform control so that a digital video signal and a digital sound signal obtained from thesignal processing part22 are recorded on theHDD32 based on a manipulation of theremote controller30 or the manipulatingpart29 by a user.

Further, thiscontroller28 can perform control so as to subsequently perform the video display and the sound reproduction described above by reading the digital video signal and the digital sound signal out of a hard disk32aby theHDD32 based on the manipulation of theremote controller30 or the manipulatingpart29 by the user and decoding the signals and then supplying the signals to thesignal processing part22.

Also, anetwork interface33 is connected to thiscontroller28. Thisnetwork interface33 is connected to thenetwork16. As a result, thecontroller28 can conduct information communication by accessing thelicense server13, thecontent server14 and theaccounting server15 through thenetwork interface33 and thenetwork16 based on the manipulation of theremote controller30 or the manipulatingpart29 by the user. Also, thecontroller28 has a function of executing a browser application, and can access various web pages using the browser application.

Further, amedia interface34 is connected to thiscontroller28. Theremovable media17 can be connected to thismedia interface34. As a result, thecontroller28 can conduct information communication with theremovable media17 through themedia interface34 based on the manipulation of theremote controller30 or the manipulatingpart29 by the user.

FIG. 3 shows one example of a signal processing system of the reproducingapparatus12 as a functional block. That is, the reproducingapparatus12 includes a network sending and receiving part (corresponding to the network interface33)35 for making connection to thenetwork16 as described above. Also, the reproducingapparatus12 includes a media sending and receiving part (corresponding to the media interface34)36 for making connection to theremovable media17.

Here, it is assumed that theremovable media17 is, for example, an SD memory card. At the time of sending to theremovable media17, the reproducingapparatus12 generates a data packet etc. of command data in a command sending and receivingpart37 and sends the data packet etc. to theremovable media17 through the media sending and receivingpart36. Also, at the time of receiving from theremovable media17, a data packet of data and a response received through the media sending and receivingpart36 are interpreted.

The reproducingapparatus12 can be broadly divided into adownloader part38 and a reproducingpart39. Thedownloader part38 is the portion for making protocol/command conversion for associating a protocol of the side of thenetwork16 with a command sent and received to theremovable media17 at the time of communication of authentication etc. of thelicense server13 and thecontent server14, and theremovable media17. Also, thedownloader part38 may include abrowser part41 for browsing a web page. In addition, thebrowser part41 corresponds to the browser application described inFIG. 2.

In thedownloader part38, a protocol/command conversion part40 makes protocol/command conversion. That is, since a payload of a packet used in communication of authentication etc. is the same but packet formats containing in order to send and receive the packet differ, the protocol/command conversion is required and the data itself sent and received is the same.

Thebrowser part41 receives a web page from thecontent server14, and generates various images (GUI) based on data of the web page. Then, thebrowser part41 outputs the generated images to thevideo display part26 to display the images. In addition,FIG. 3 omits various blocks capable of being present between thebrowser part41 and thevideo display part26. Also, thebrowser part41 accepts a user manipulation inputted from the manipulatingpart29 and the receivingpart31. Then, thebrowser part41 executes processing according to the accepted user manipulation. In addition, it may be said that data of the web page is an application program described by HTML etc. In other words, thebrowser part41 requests an application program (data of the web page) from thecontent server14, and acquires and executes the application program distributed according to the request.

The reproducingpart39 performs processing for reproducing content. When the processing for reproducing content is started, anauthentication part42 first performs authentication processing through the command sending and receivingpart37 with respect to theremovable media17. Here, theauthentication part42 and theremovable media17 respectively hold a certificate using public key cryptography, and perform mutual authentication.

After the mutual authentication succeeds, theauthentication part42 and theremovable media17 derive a session key by the same generating algorithm. The session key is possessed as a secret by theauthentication part42 and theremovable media17, respectively, and is used as an encryption key in the case of encryption in the case of conducting secret data communication between theauthentication part42 and theremovable media17. The session key is, for example, 128 bits of key data, and the cipher can use AES.

Theauthentication part42 can read and write data in a secret area (Protected Area) of theremovable media17. In the case of reading out data present in the secret area of theremovable media17, theauthentication part42 issues a command for reading data out of the secret area of theremovable media17. Then, data is read out of the secret area of the inside of theremovable media17, and the data is encrypted by the session key described above. The encrypted data is read out through the media sending and receivingpart36, and is decoded in theauthentication part42 by the session key held by theauthentication part42.

Also, in the case of writing data in the secret area of theremovable media17, processing opposite to the above is performed. That is, when the data is encrypted by a session key in theauthentication part42 and a command for writing the data in the secret area of theremovable media17 is issued through the command sending and receivingpart37, the data is sent to theremovable media17 through the media sending and receivingpart36. In theremovable media17, the encrypted data is decoded using a session key held by theremovable media17, and its data is written in the secret area of theremovable media17.

Aright acquiring part43 is the portion for interpreting data read out of theremovable media17 and acquiring and interpreting a title key for decoding encrypted content and right information including a usage rule etc. in which license conditions of content are described. The license conditions etc. of content are described in the usage rule, and theright acquiring part43 decides whether or not items of the number of reproductions, the number of copies available, a reproducible period, etc. are used in the range of license. In the case of deciding that the items are used in the range of license, the title key is taken out and is sent out to acontent decoding part44.

Also, the reproducingpart39 receives content from thecontent server14 by acontent receiving part45. A URL indicating an address of content corresponding to an address of thecontent server14 is described in the right information. Thecontent receiving part45 accesses thecontent server14 based on this URL information and obtains the encrypted content.

An HTTP or an RTP (real time transport protocol) is used in a transfer protocol of the encrypted content between thecontent server14 and the reproducingapparatus12. Thecontent receiving part45 can receive the encrypted content at a speed according to a reproduction speed of content in the reproducingpart39. Also, according to trick reproduction such as a chapter jump or fast-forward reproduction, only the necessary portion can be received from the whole content.

The encrypted content received by thecontent receiving part45 are sent to thecontent decoding part44. Here, the encrypted content are decoded using the title key described above. Here, content are encrypted by, for example, a counter mode of AES. The encrypted content are decoded according to a predetermined format. The decoded content are reproduced by acontent reproducing part46.

FIG. 4 shows a configuration example of thecontent server14. Thecontent server14 includes acommunication part50, acontroller51 and astorage part52. Thecommunication part50 is a module for sending and receiving data to thenetwork16, and a data request specifying a URL is received from a device connected to thenetwork16. Thestorage part52 stores, for example, data of a web page for providing moving image content such as a movie or information about the moving image content. A URL is assigned to each data. When a data request specifying a URL is received from a certain device, thecontroller51 sends the data corresponding to the URL to the device. In addition, as described above, theaccounting server15 may have a function of storing and delivering data of a web page. That is, theaccounting server15 may have a configuration equivalent to that of thecommunication part50, thecontroller51 and thestorage part52. Or, other servers may store and deliver data of a web page.

FIGS. 5 to 7 show one example of a streaming reproduction sequence using theremovable media17. In addition, any flow ofFIGS. 5 to 7 can be defined in the future in a predetermined part of a standard document of predetermined standards. In other words, thecontent reproducing system11 executes any processing ofFIGS. 5 to 7 according to a predetermined agreement decided in the future by a standards association. A component includes four parts of thecontent server14, theaccounting server15, thelicense server13 and the reproducingapparatus12 described inFIG. 1, and processing of the reproducingapparatus12 is further divided into thedownloader part38 and the reproducingpart39. Also, theremovable media17 are connected to the reproducingapparatus12.

First, in step S11, thedownloader part38 of the reproducingapparatus12 communicates with thecontent server14 to select content to be viewed from now. Thecontent server14 presents a list of available content to thedownloader part38 of the reproducingapparatus12. In addition, thedownloader part38 displays a web page including the list of content using, for example, thebrowser part41, and selects the content according to a user manipulation input to its page. A display configuration of the web page is described inFIG. 9.

Then, in step S12, thedownloader part38 notifies thecontent server14 of the content, whose viewing is decided, selected from the list by the user.

Then, in step S13, thecontent server14 performs accounting processing on the content requested from the user. That is, thecontent server14 charges the accountingserver15 an accounting of the requested content.

Subsequently, when accounting and settlement processing for the user is completed without any problem between the accountingserver15 and thedownloader part38 in step S14, thelicense server13 is notified of the completion of purchase processing from theaccounting server15 in step S15.

Here, in step S16, thelicense server13 generates right information for theremovable media17 connected to the reproducingapparatus12. When content are previously encrypted inside thecontent server14, key data for decoding the content is transferred from thecontent server14 to thelicense server13. Thelicense server13 generates data as right information by gathering the key data, a usage rule in which license conditions of the content purchased by the user are described, and a URL indicating a place of storage of the content.

In addition, in the case of including the content URL in the right information, thelicense server13 may have, for example, a table associated with the URL every content identifier. Then, by including the content identifier in notification of the completion of purchase processing and accounting charge, thelicense server13 can identify the content identifier and identify the content URL to be sent to theremovable media17. Also, for example, theaccounting server15 may send the URL to the reproducingapparatus12 in step S15.

Subsequently, thelicense server13 indirectly communicates with theremovable media17 through thedownloader part38 of the reproducingapparatus12. Thelicense server13 directly communicates with thedownloader part38 of the reproducingapparatus12, but thedownloader part38 converts a protocol into a command of theremovable media17 and thereby, thelicense server13 indirectly communicates with theremovable media17.

In the case of its communication, thelicense server13 and theremovable media17 perform mutual authentication.FIG. 3 describes a procedure in which the reproducingapparatus12 and theremovable media17 perform mutual authentication, and thelicense server13 plays a role equivalent to that of the reproducingapparatus12 herein and thereby, equivalent mutual authentication can be performed.

That is, thelicense server13 can read and write data in the secret area of theremovable media17. Like the reproducingapparatus12, thelicense server13 also holds a certificate of another public key system, and thelicense server13 and theremovable media17 can perform mutual authentication.

In a stage of the completion of accounting processing, thedownloader part38 of the reproducingapparatus12 starts a procedure in which thelicense server13 and theremovable media17 perform mutual authentication. When thedownloader part38 notifies thelicense server13 of the start of mutual authentication, data of the start of authentication is sent from thelicense server13 as its response. Thedownloader part38 converts the data into a command, and sends the command to theremovable media17.

Theremovable media17 responds to its sending, and replies response data to thedownloader part38. Thedownloader part38 converts its response data into a network protocol, and sends the protocol to thelicense server13.

By repeating such a procedure, thelicense server13 and theremovable media17 can perform mutual authentication while thedownloader part38 works as a bridge. When the mutual authentication succeeds, a session key shared by only thelicense server13 and theremovable media17 is generated.

The right information described above is encrypted by its session key in thelicense server13, and is sent to theremovable media17 through thedownloader part38. Theremovable media17 receiving the encrypted right information decodes the right information using its session key inside theremovable media17, and writes the right information in its own secret area. In addition, theremovable media17 may write a title key in its own secret area and write a usage rule and a URL in its own normal storage area.

When step S16 is completed, the reproducingpart39 of the reproducingapparatus12 and theremovable media17 perform mutual authentication in step S17. A procedure of this mutual authentication is shown in description ofFIG. 3. In addition, a trigger of the start of this mutual authentication includes, for example, (1) theremovable media17 recognizes the completion of step S16 and notifies the reproducingpart39 of the start of mutual authentication, and (2) thelicense server13 recognizes the completion of step S16 and notifies the reproducingpart39 of the start of mutual authentication, and (3) thelicense server13 recognizes the completion of step S16 and notifies thedownloader part38 and thedownloader part38 notifies the reproducingpart39, and (4) thedownloader part38 monitors an exchange of data in S16 to thereby recognize the completion of S16 and notifies the reproducingpart39. When the mutual authentication succeeds between the reproducing part39 (authentication part42) and theremovable media17, a session key different from the above is shared by both of the reproducingpart39 and theremovable media17. The reproducingpart39 acquires right information from theremovable media17 using its session key.

Subsequently, the reproducingpart39 receives content from thecontent server14 by thecontent receiving part45. That is, since a URL indicating an address of the content corresponding to an address of thecontent server14 is described in the right information as described above, thecontent receiving part45 accesses thecontent server14 based on this URL information in step S18, and obtains the encrypted content in step S19.

The encrypted content received by thecontent receiving part45 are sent to thecontent decoding part44 and are decoded using the title key described above. Subsequently, the decoded content are reproduced by thecontent reproducing part46 in step S20.

FIG. 6 shows another example of the streaming reproduction sequence described inFIG. 5. InFIG. 6, description is made by assigning the same numerals to the same steps as those ofFIG. 5. A media ID which is an identifier unique to individual media is written in the secret area of theremovable media17.

Hence, thelicense server13 acquires a media ID from theremovable media17 in a procedure in which thelicense server13 and theremovable media17 perform mutual authentication in step S16. Then, thelicense server13 generates a media ID authentication code (right information is already delivered) which is a message authentication code (MAC) to the media ID using a title key as a key, and writes the code in theremovable media17.

Also, the reproducingpart39 acquires a media ID from theremovable media17 in a procedure in which the reproducingpart39 and theremovable media17 perform mutual authentication like thelicense server13 in the case of acquiring a title key from the removable media in step S17 at the time of reproduction. Then, the reproducingpart39 generates a media ID authentication code which is a message authentication code (MAC) to the media ID using a title key as a key like thelicense server13 using the acquired media ID and a title key capable of being acquired after the mutual authentication succeeds, and verifies whether or not its code is equal to a media ID authentication code recorded on theremovable media17. When this verification succeeds, the reproducingpart39 can decode the encrypted content using its title key.

That is, after accounting processing of content is completed and right information is written from thelicense server13 into theremovable media17, a media ID authentication code is sent from thelicense server13 to thecontent server14 as shown in step S21. Also, when the reproducingpart39 requests content from thecontent server14 in step S18, a media ID authentication code is sent simultaneously.

Then, thecontent server14 checks whether or not the media ID authentication code is registered in thecontent server14 in order to check whether or not a request source of content already holds right information as shown in step S22. When its check is obtained, thecontent server14 gradually starts streaming delivery of content, and when the check is not obtained, the streaming delivery of content is not started and an error is replied. Accordingly, it can be checked whether or not the content are requested after the right information is previously acquired. When the right information is not acquired in the reproducingpart39, this inhibition can protect resources of thenetwork16.

FIG. 7 shows a further example of the streaming reproduction sequence described inFIG. 5. InFIG. 7, description is made by assigning the same numerals to the same steps as those ofFIG. 5, and processing (step S18) in which the reproducingpart39 requests content from thecontent server14 is performed before processing (step S17) in which the reproducingpart39 acquires right information from theremovable media17.

That is, since the encrypted content are a huge file, about several minutes to several tens of minutes are required by the time when data enough to be able to perform reproduction processing is accumulated. On the other hand, since the time taken to acquire right information from theremovable media17 is about several seconds, processing for acquiring content is first started and simultaneously with this, processing for acquiring right information is performed so that reproduction can be started as soon as possible and thereby, the time taken to start the reproduction of content can be reduced.

In addition, processing for checking a media ID authentication code described inFIG. 6 can be added to the streaming reproduction sequence shown inFIG. 7.

Also, it is contemplated to associate a settlement state of content with a media ID of theremovable media17 as a distribution destination of right information and save the settlement state and the media ID in thelicense server13. When this is done, since the media ID of theremovable media17 providing the right information in the past is stored in thelicense server13 even when theremovable media17 is initialized and the right information is eliminated, it can be recognized as a request from theremovable media17 holding the same media ID in the case of mutual authentication, with the result that the right information can again be provided for itsremovable media17 without another accounting and settlement processing.

Further, it is contemplated to be constructed so that plural media IDs can be registered in one account of an end user of thelicense server13. When this is done, in the case of receiving a request for right information from theremovable media17 holding any of the plural media IDs registered in thelicense server13, it is considered that the right information is already downloaded, and the right information can again be provided for itsremovable media17 without another accounting and settlement processing.

FIG. 8 shows one example of reproduction processing and download processing using theremovable media17. In addition, a flow ofFIG. 8 can be defined in a predetermined part of a standard document of predetermined standards. In other words, thecontent reproducing system11 executes processing ofFIG. 8 according to a predetermined agreement decided in the future by a standards association. In addition, the flow ofFIG. 8 may be defined inside the same standard document as the standards defined inFIGS. 5 to 7. InFIG. 8, description is made by assigning the same numerals to the same steps as those ofFIG. 5. Theremovable media17 writes right information in its own secret area in step S16 as described above. Then, in step S30, theremovable media17 downloads encrypted content from thecontent server14, and writes the encrypted content in its own non-secret area, and saves the content. In addition, in the case of downloading the encrypted content, the reproducingapparatus12 sends a content request specifying a URL, and this URL may be sent from, for example, theaccounting server15 in step S15, or thelicense server13 in step S16.

After saving the content, theremovable media17 may be connected to an apparatus other than the reproducingapparatus12, and when the reproducingapparatus12 receives a reproduction request, the following processing is executed. When a content request is received from the reproducingpart39 in step S32, theremovable media17 starts mutual authentication in step S33. After the mutual authentication, the reproducingpart39 reads a title key and a usage rule written in theremovable media17. Then, the reproducingpart39 reads encrypted content in step S34, and decodes and reproduces the encrypted content by the title key instep35.

FIG. 9 shows a screen configuration example of a web page delivered by thecontent server14 and displayed on thevideo display part26 by the reproducingapparatus12. In addition, these web pages are displayed in the case of browsing in, for example, steps S11 ofFIGS. 5 to 8.

InFIG. 9A, anintroduction image91, adownload button92 and astreaming button93 are arranged inside ascreen90. Theintroduction image91 is an image for introducing moving image content, and is, for example, an introduction document or an introduction movie. Thedownload button92 is a button for downloading the moving image content. When thedownload button92 is selected, the content reproducing system in the embodiment executes processing from S11 to S31 ofFIG. 8. Thestreaming button93 is a button for streaming and reproducing the moving image content. When thestreaming button93 is selected, any of the reproduction flows described inFIGS. 5 to 7 is executed.

Data of this web page is stored in, for example, thestorage part52 of thecontent server14. The data of the web page includes image data of theintroduction image91, thedownload button92 and the streaming button, arrangement data indicating arrangement positions inside a page of these images, and action data indicating an action generated in the case of accepting a manipulation input to these images. The action data includes a data code for sending content decision notification including a content identifier and a download request to thecontent server14 according to a manipulation to thedownload button92, and a data code for sending content decision notification including a content identifier and a streaming request to thecontent server14 according to a manipulation to the streaming button. Then, when thebrowser part41 of the reproducingapparatus12 accesses the web page, thebrowser part41 receives data of the web page, and generates an image of thescreen90 based on the data, and outputs and displays its image to thevideo display part26.

Also, thebrowser part41 determines that a manipulation to any image is accepted according to a user manipulation inputted from the manipulatingpart29 and the receivingpart31, and executes processing according to the image accepting the manipulation. That is, when a manipulation to thedownload button92 is accepted, thebrowser part41 notifies thecontroller28. And then, thecontroller28 controls thedownloader part38 and theremovable media17 to execute processing of S11 and later so as to execute any reproduction flow described inFIG. 8. Similarly, when a manipulation to thestreaming button93 is accepted, thebrowser part41 notifies thecontroller28. And then, thecontroller28 controls thedownloader part38, the reproducingpart39 and theremovable media17 to execute processing of S11 and later so as to execute any of the reproduction flows described inFIGS. 5 to 7.

In examples ofFIGS. 9B and 9C, one or both of thedownload button92 and thestreaming button93 are, for example, grayed out. In thisscreen90, thedownload button92 is grayed out when the reproducingapparatus12 cannot use download, and thestreaming button93 is grayed out when the reproducingapparatus12 cannot use streaming.

As one technique for implementing display forms ofFIGS. 9B and 9C, thecontent server14 determines whether or not the reproducingapparatus12 can use download and streaming, and delivers a web page in which the button corresponding to the function incapable of being used by the reproducingapparatus12 is grayed out using, for example, a direct function.

As one technique for making the determination described above, thecontent server14 acquires information indicating whether or not the reproducingapparatus12 can use download in the embodiment and information indicating whether or not the reproducingapparatus12 can use streaming in the embodiment from the reproducingapparatus12. Thecontent server14 is notified of this information from the reproducingapparatus12 as, for example, predetermined flag information.

Or, as another technique for making the determination described above, when a web page is accessed from the reproducingapparatus12, thecontent server14 requests the reproducingapparatus12 and theremovable media17 to start mutual authentication of thelicense server13 and theremovable media17, and when a result of the authentication succeeds, it is decided that download can be used. In addition, the result of this authentication may be acquired from any of the license server and the reproducingapparatus12. Also, thecontent server14 further requests mutual authentication of theremovable media17 and the reproducingpart39 from the reproducingapparatus12 and theremovable media17, and when a result of the authentication succeeds and it is decided that download can be used by the decision described above, it is decided that streaming can be used.

As another technique for implementing the display forms ofFIGS. 9B and 9C, thecontent server14 may deliver data of a web page including a code controlled so as to change a display form of thedownload button92 or thestreaming button93 according to a state as to whether or not the reproducingapparatus12 copes with download or streaming of the embodiment.

In an example ofFIG. 9D, a download button and a streaming button are prepared every resolution of moving image content of a delivery target. In this example, adownload button92aand astreaming button93aare arranged for a manipulation of acquiring content of HD resolution, and adownload button92band astreaming button93bare arranged for a manipulation of acquiring content of UHD resolution. Then, when thedownload button92bor thestreaming button93bis selected, download processing or streaming processing described in the embodiment is executed. When thedownload button92aor thestreaming button93ais selected, for example, processing in conformity with conventional content protection standards according to a procedure different from that of the embodiment is executed.

Since the embodiment described above is constructed so that right information is recorded on theremovable media17 and the reproducingapparatus12 streams and reproduces the encrypted content while decoding the encrypted content delivered from thecontent server14, the mass encrypted content can be prevented from being recorded on theremovable media17, with the result that deterioration of a recording element of theremovable media17 can be reduced and therefore, the life of theremovable media17 can be prevented from being decreased.

Also, after thelicense server13 and theremovable media17 connected to the reproducingapparatus12 directly perform mutual authentication, right information is downloaded and recorded on theremovable media17. As a result, it is unnecessary for the reproducingapparatus12 to hold secret information necessary to download the right information from thelicense server13, and the right information can be downloaded from thelicense server13 to theremovable media17 by a protection module of one method.

Further, the reproducingapparatus12 and theremovable media17 perform mutual authentication and thereby, the reproducingapparatus12 can acquire right information even when the reproducingapparatus12 and thelicense server13 do not perform mutual authentication directly. As a result, the right information can be saved in theremovable media17 offline.

Also, the reproducingapparatus12 may acquire right information without recording the right information on theremovable media17. Concretely, after thelicense server13 and theremovable media17 perform mutual authentication, the reproducingapparatus12 holds the right information. Thereafter, the reproducingapparatus12 and theremovable media17 perform mutual authentication, and a key for decoding the held right information is obtained. The reproducingapparatus12 decodes the right information by the key, and obtains and reproduces encrypted content. In other words, it is herein constructed so that theremovable media17 functions as physical media for authentication without recording the right information as well as the encrypted content on theremovable media17.

In addition, this invention is not limited to the embodiment itself described above, and components can variously be modified and embodied without departing from the gist of the invention in the stage of implementation. Also, various inventions can be formed by properly combining plural components disclosed in the embodiment described above. For example, several components may be eliminated from all the components shown in the embodiment. Further, components related to different embodiments may be combined properly.

While certain embodiments have been described, these embodiments have been presented by way of example only, and are not intended to limit the scope of the inventions. Indeed, the novel embodiments described herein may be embodied in a variety of other forms; furthermore, various omissions, substitutions and changes in the form of the embodiments described herein may be made without departing from the spirit of the inventions. The accompanying claims and their equivalents are intended to cover such forms or modifications as would fall within the scope and spirit of the inventions.

Claims (7)

What is claimed is:

1. An electronic apparatus, comprising:

a connecting controller configured to control a connection to removable media having a content protection function;

a communicator controller configured to receive data of a web page from a web server, the web page comprising a first object to start download processing of a first content and a second object to start streaming processing of a second content;

a display controller configured to display the web page and to play the first content or the second content on a display;

a hardware processor coupled to a memory configured to execute instructions stored in the memory, configured to:

receive a first input made by a manipulation of the first object or a second input made by a manipulation of the second object;

start the download processing in response to a reception of the first input; and

start the streaming processing in response to a reception of the second input,

wherein the download processing comprises:

first processing comprising that the removable media obtains a first mutual authentication from a license server through the communicator controller;

second processing comprising that, when the first mutual authentication is successful, the removable media receives a first title key from the license server through the communicator controller and write said first title key in own recording area; and

third processing comprising that the removable media receives first encrypted content from a content server through the communicator controller and write said first encrypted content in the own recording area, and

wherein the streaming processing comprises:

fourth processing comprising that the removable media obtains a second mutual authentication from the license server through the communicator controller;

fifth processing comprising that, when the second mutual authentication is successful, the removable media receives a second title key and a content address from the license server through the communicator controller and write said second title key and said content address in the own recording area;

sixth processing comprising that the removable media and the display controller perform a third mutual authentication;

seventh processing comprising that, when the third mutual authentication is successful, the display controller acquires the second title key and the content address recorded on the removable media;

eighth processing comprising that the display controller streams and receives second encrypted content from the content server using the content address; and

ninth processing comprising that the display controller decodes the streamed-and-received second encrypted content using the second title key, and streams and plays the decoded second encrypted content while decoding the second encrypted content from the license server.

2. The display control apparatus ofclaim 1, further comprising:

a conversion controller configured to associate a protocol of the license server with a command with respect to the removable media.

3. The electronic apparatus ofclaim 1,

wherein the electronic apparatus sends a media ID authentication code derived from a title key of content and a media ID described in the removable media in the case of acquiring encrypted content from the content server in the eighth processing.

4. A display control method executed in an electronic apparatus which comprises a connecting controller for controlling a connection to removable media having a content protection function, a display controller for displaying a web page and to play a first content or a second content on a display, and a hardware processor coupled to a memory configured to execute instructions stored in the memory, and which outputs video to the display, the display control method comprising:

receiving data of the web page from a web server to a communicator, the web page comprising a first object to start download processing of a first and a second object to start streaming processing of a second content;

receiving a first input made by a manipulation of the first object or a second input made by a manipulation of the second object;

starting the download processing in response to a reception of the first input; and

starting the streaming processing in response to a reception of the second input,

wherein the download processing comprises:

first processing comprising that the removable media obtains a first mutual authentication from a license server through the communicator;

second processing comprising that, when the first mutual authentication is successful, the removable media receives a first title key from the license server through the communicator and write said first title key in own recording area; and

third processing comprising that the removable media receives first encrypted content from a content server through the communicator and write said first encrypted content in the own recording area, and

the streaming processing comprises:

fourth processing comprising that the removable media obtains a second mutual authentication from the license server through the communicator;

fifth processing comprising that, when the second mutual authentication is successful, the removable media receives a second title key and a content address from the license server through the communicator and write said second title key and said content address in the own recording area;

sixth processing comprising that the removable media and the display controller perform a third mutual authentication;

seventh processing comprising that, when the third mutual authentication is successful, the display controller acquires the second title key and the content address recorded on the removable media;

eighth processing comprising that the display controller streams and receives second encrypted content from the content server using the content address; and

ninth processing comprising that the display controller decodes the streamed-and-received second encrypted content using the second title key, and streams and plays the decoded second encrypted content while decoding the second encrypted content from the license server.

5. The display control method ofclaim 4, further comprising: associating a protocol of the license server with a command to the removable media.

6. The display control method ofclaim 4, further comprising:

sending a media ID authentication code derived from a title key of content and a media ID described in the removable media in the case of acquiring encrypted content from the content server in the eighth processing.

7. A system comprising one or more servers for providing a graphical user interface and content, comprising:

a first storage configured to store data of a web page comprising a first object to start download processing of a first content and a second object to start streaming processing of a second content;

a communicator controller configured to receive a request for access to the web page from a terminal device, the terminal device comprising:

a connecting controller configured to control a connection to removable media comprising a content protection function,

a first transmitter configured to send the data of the web page to the terminal device via according to the request for access;

a second storage configured to store first and second encrypted content; and

a second transmitter configured to send the first or second encrypted content to said terminal device according to a content request sent from the terminal device,

wherein the download processing comprises:

first processing comprising that the removable media obtains a first mutual authentication from a license server through the communicator controller;

second processing comprising that, when the first mutual authentication is successful, the removable media receives a first title key from the license server through the communicator controller and write said first title key in own recording area; and

third processing comprising that the removable media receives the first encrypted content sent from the second transmitter through the communicator controller and write said first encrypted content in the own recording area, and

the streaming processing comprises:

fourth processing comprising that the removable media obtains a second mutual authentication from the license server through the communicator controller;

fifth processing comprising that, when the second mutual authentication is successful, the removable media receives a second title key and a content address from the license server through the communicator controller and write said second title key and said content address in the own recording area;

sixth processing comprising that the removable media and a display controller perform a third mutual authentication;

seventh processing comprising that, when the third mutual authentication is successful, the display controller acquires the second title key and the content address recorded on the removable media;

eighth processing comprising that the display controller accesses a server system using the content address and streams and receives second encrypted content sent from the second transmitter; and

ninth processing comprising that the display controller decodes the streamed-and-received second encrypted content using the second title key, and streams and plays the decoded second encrypted content while decoding the second encrypted content from the license server.

Images